From f3e88ddba706c406579b91c837c7eb7ceb5dc841 Mon Sep 17 00:00:00 2001
From: Simon Merrick <simonmerrick@catalyst.net.nz>
Date: Mon, 31 Aug 2020 17:09:09 +1200
Subject: [PATCH] Fix syntax error in default rolesync configmap

Change-Id: I455ed0106dd257acbde58af408de0bf6e6abe7d3
---
 doc/source/user/k8s-keystone-authN-authZ.rst                | 6 +++---
 .../templates/kubernetes/fragments/enable-keystone-auth.sh  | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/doc/source/user/k8s-keystone-authN-authZ.rst b/doc/source/user/k8s-keystone-authN-authZ.rst
index 0d9f1e1dc0..ef014deb47 100644
--- a/doc/source/user/k8s-keystone-authN-authZ.rst
+++ b/doc/source/user/k8s-keystone-authN-authZ.rst
@@ -176,10 +176,10 @@ user can update the default `keystone-sync-policy` configmap as follows.
     apiVersion: v1
     kind: ConfigMap
     metadata:
-    name: keystone-sync-policy
-    namespace: kube-system
+      name: keystone-sync-policy
+      namespace: kube-system
     data:
-    syncConfig: |
+      syncConfig: |
         role-mappings:
           - keystone-role: member
             groups: ["project-1"]
diff --git a/magnum/drivers/common/templates/kubernetes/fragments/enable-keystone-auth.sh b/magnum/drivers/common/templates/kubernetes/fragments/enable-keystone-auth.sh
index 70542becf3..73c108cb29 100644
--- a/magnum/drivers/common/templates/kubernetes/fragments/enable-keystone-auth.sh
+++ b/magnum/drivers/common/templates/kubernetes/fragments/enable-keystone-auth.sh
@@ -73,8 +73,8 @@ metadata:
 data:
   syncConfig: |
     role-mappings:
-      keystone-role: member
-      groups: []
+      - keystone-role: member
+        groups: []
 EOF
     }